Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: acYDLLySl6UCiru7Akms+Ouu+/YzrwO7Ui0Xuvs+wKA=
Subject key identifier: F6:FC:71:87:7B:F2:BE:D1:AF:9C:57:00:B4:A6:02:1C:44:85:9B:E2
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 019A4DE20109F3C14C9E7246180284856E52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 9BctfL9o9YoCjzrYz/EhpbGPwCPqx0vqA+Q7Y+6zXl0=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:01:09:f3:c1:4c:9e:72:46:18:02:84:85:6e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=f6fc71877bf2bed1af9c5700b4a6021c44859be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ac:7f:d2:88:04:7d:d4:03:cc:84:be:7a:ea:
cb:7c:fa:14:10:d6:d9:21:3a:e4:5b:1a:14:3e:e0:
7e:97:35:18:fb:1e:d7:ca:84:d6:0e:9e:2b:f6:3f:
7b:ce:a7:28:56:94:98:a7:da:8c:6d:63:2a:85:c3:
a2:f7:2f:d3:94:01:14:4c:95:a0:2c:7a:0d:c1:2f:
86:bb:7b:de:e9:b8:29:53:44:1f:6a:1d:56:76:b2:
6f:99:3a:4d:de:6d:55:24:71:39:1d:0b:f1:7e:59:
32:4e:45:26:58:8e:85:2b:a7:ec:80:ba:02:75:be:
0f:a6:d1:ef:29:39:8e:e5:9e:ae:5e:d3:16:68:7c:
0c:83:cf:ae:39:c6:fa:b6:ae:ba:8c:c6:14:3d:b0:
41:36:a4:eb:5f:8d:36:b1:2e:99:21:b6:2c:97:98:
af:77:54:b7:c1:7e:62:08:67:74:d4:ea:e1:0c:5d:
d4:17:1b:46:3e:94:ed:f4:6a:99:48:40:42:e4:9f:
dc:4b:4a:f8:88:1b:2b:9f:86:98:77:7d:86:ba:68:
d7:e5:71:64:1e:cd:25:28:95:6f:a7:3f:7f:99:94:
4e:4a:5f:c5:87:e6:54:93:ef:75:8f:23:ff:f9:f2:
20:03:cf:e1:bc:a4:db:57:88:c4:ff:11:41:91:94:
89:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FC:71:87:7B:F2:BE:D1:AF:9C:57:00:B4:A6:02:1C:44:85:9B:E2
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:50:fe:0b:df:f3:f6:44:b6:f4:c3:fc:fc:b1:0d:ef:c6:a9:
60:39:ba:84:ad:84:5e:57:3a:35:f1:ba:9d:da:c9:71:52:2f:
78:e5:c9:45:50:1f:36:63:68:14:67:14:99:44:7b:03:dc:4f:
4b:26:a1:0f:a1:89:2e:69:a6:ae:ba:62:f1:6a:18:92:33:5a:
72:ba:b2:69:b2:43:9a:99:7c:b6:d5:d4:a2:40:01:47:df:db:
8e:a3:c1:ed:8f:3e:8a:d8:18:99:1c:b4:c2:8f:62:c5:20:ef:
57:3c:98:c6:d2:0a:2d:1d:80:2e:8f:0b:57:b1:0e:f0:fa:f4:
ea:ef:60:a7:e8:d8:18:09:38:73:d3:8f:53:a7:17:ae:d1:ba:
c8:b5:ff:26:2c:12:79:b5:93:79:ac:83:a2:dc:5b:e1:8f:d0:
e4:14:40:2a:56:2e:f7:54:77:5e:34:56:a4:92:c6:8d:0f:72:
02:b3:90:0f:94:8a:7e:d2:c7:5c:5b:bb:dc:6c:07:0b:00:79:
f4:37:4e:0b:6f:6a:4b:9d:50:85:5c:95:a5:e0:80:93:0d:6a:
b5:0a:c5:ca:bc:bd:5b:72:c6:8b:e1:bb:7f:3b:0d:96:6f:9a:
32:54:12:e3:d9:7d:d4:b7:60:43:8d:95:b5:64:ee:d9:b8:f0:
ed:72:7f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:23 2025 by rpki-client